DataLife Engine versions 13.0 and below suffer from a cross site scripting vulnerability. Continue reading...